{
  "cveId": "CVE-2024-29645",
  "url": "https://patchblox.com/security/cve/CVE-2024-29645",
  "summary": "CVE-2024-29645 is fixed in radare2 on 1 platform by OPENSUSE-SU-2024:0397-1 (version 5.9.8-bp156.4.3.1), released December 9, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "radare2: This update for radare2 fixes the following issues:\n\nUpdate to version 5.9.8:\n\n- CVE-2024-29645: buffer overflow vuln...",
  "description": "This update for radare2 fixes the following issues:\n\nUpdate to version 5.9.8:\n\n- CVE-2024-29645: buffer overflow vulnerability allows an attacker to\n  execute arbitrary code via the parse_die function (boo#1234065).\n- For more details, check full release notes:\n  https://github.com/radareorg/radare2/releases/tag/5.9.8\n  https://github.com/radareorg/radare2/releases/tag/5.9.6\n  https://github.com/radareorg/radare2/releases/tag/5.9.4\n  https://github.com/radareorg/radare2/releases/tag/5.9.2\n  https://github.com/radareorg/radare2/releases/tag/5.9.0 \n  https://github.com/radareorg/radare2/releases/tag/5.8.8",
  "published": "2024-12-09T10:44:56Z",
  "severity": "",
  "epss": 0.00241,
  "epssPercentile": 0.15263,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "radare2",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "5.9.8-bp156.4.3.1",
      "fix": "OPENSUSE-SU-2024:0397-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2024-0397-1",
      "released": "2024-12-09T10:44:56Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T19:38:12Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}